Iptables rule example iptables -I INPUT -s 186.2.160.0/24 -p tcp -dport 80 -j ACCEPT If traffic load balancing is included in your service plan, you should also add the checker's IP address to the list of exceptions: 190.115.30.44, 77.220.207.192/28 and 77.220.207.224/28.TCP port 80 is used for HTTP connections, TCP port 443 is used for HTTPS connections,.186.2.160.0/24 and 77.220.207.192/27 for L7 proxying and protection services using the symmetrical connection method,.The scrubbing and content delivery network use the subnets: After changing the IP address, it is recommended to restrict the possibility of connecting to your server with the ports used for all hosts, except for DDoS-GUARD network devices.This may result in the compromise of the real IP address if you use a mail server located on a dedicated virtual or physical server together with your website. Please note that the IP address can still be transmitted in third-party protocols, for example, email message headers. In order to use the services that do not provide protection at 元-4 levels, It is also recommended to change the hosting IP address and adjust it in the service settings. The IP address used by the website before activating the protection is likely to have already been compromised (saved in various DNS history services, etc.) and can be used for targeted attacks to the IP address (attacks with amplification or attacks that exploit the vulnerabilities of transport protocols).

Before receiving and using it, make sure that your server meets the requirements.

Let's Encrypt certificate is activated by default for all the protected websites.

We remind you that we provide a free DNS hosting for all the services that work with websites. In addition, it is advised to avoid using the real IP address of the server in any of your domain name DNS records.

You should make sure that all domains and subdomains employed by the protected resource use the IP address of the provided service as the DNS A-record.

You can either use utilities built into the operating system (nslookup for Windows, whois, dig, host for Linux) or online services, such as for verification of the records. If a free SSL certificate is not suitable for you, you can purchase a Comodo PositiveSSL certificate in our store, or any other certificate from a verified vendor and add it in your DDoS-GUARD account in the domain management section. In order to ensure the correct functioning of the system and provide maximum protection against malicious queries, we recommend configuring the web server.

Ddos ip online free